@payez/next-mvp 4.0.0 → 4.0.2
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/api-handlers/account/change-password.js +110 -110
- package/dist/api-handlers/admin/analytics.d.ts +19 -19
- package/dist/api-handlers/admin/analytics.js +378 -378
- package/dist/api-handlers/admin/audit.d.ts +19 -19
- package/dist/api-handlers/admin/audit.js +213 -213
- package/dist/api-handlers/admin/index.d.ts +21 -21
- package/dist/api-handlers/admin/index.js +42 -42
- package/dist/api-handlers/admin/redis-sessions.d.ts +35 -35
- package/dist/api-handlers/admin/redis-sessions.js +203 -203
- package/dist/api-handlers/admin/sessions.d.ts +20 -20
- package/dist/api-handlers/admin/sessions.js +283 -283
- package/dist/api-handlers/admin/site-logs.d.ts +45 -45
- package/dist/api-handlers/admin/site-logs.js +317 -317
- package/dist/api-handlers/admin/stats.d.ts +20 -20
- package/dist/api-handlers/admin/stats.js +239 -239
- package/dist/api-handlers/admin/users.d.ts +19 -19
- package/dist/api-handlers/admin/users.js +221 -221
- package/dist/api-handlers/admin/vibe-data.d.ts +79 -79
- package/dist/api-handlers/admin/vibe-data.js +267 -267
- package/dist/api-handlers/auth/refresh.js +633 -633
- package/dist/api-handlers/auth/signout.js +186 -186
- package/dist/api-handlers/auth/verify-code.d.ts +43 -43
- package/dist/api-handlers/auth/verify-code.js +90 -90
- package/dist/api-handlers/session/viability.js +114 -114
- package/dist/api-handlers/test/force-expire.js +59 -59
- package/dist/auth/auth-decision.js +182 -182
- package/dist/auth/utils/token-utils.d.ts +83 -83
- package/dist/auth/utils/token-utils.js +218 -218
- package/dist/client/AuthContext.js +115 -115
- package/dist/client/better-auth-client.d.ts +1020 -1020
- package/dist/components/SessionSync.js +121 -121
- package/dist/components/account/MobileNavDrawer.js +64 -64
- package/dist/components/account/UserAvatarMenu.js +91 -91
- package/dist/components/admin/VibeAdminLayout.js +71 -71
- package/dist/hooks/useAuthSettings.js +93 -93
- package/dist/hooks/useAvailableProviders.d.ts +43 -43
- package/dist/hooks/useAvailableProviders.js +112 -112
- package/dist/lib/app-slug.d.ts +95 -95
- package/dist/lib/app-slug.js +172 -172
- package/dist/lib/test-aware-get-token.js +86 -86
- package/dist/lib/token-lifecycle.d.ts +78 -78
- package/dist/lib/token-lifecycle.js +360 -360
- package/dist/pages/admin-login/page.js +73 -73
- package/dist/pages/client-admin/ClientSiteAdminPage.js +179 -179
- package/dist/pages/login/page.js +202 -202
- package/dist/pages/showcase/ShowcasePage.js +142 -142
- package/dist/pages/test-env/EmergencyLogoutPage.js +99 -99
- package/dist/pages/test-env/JwtInspectPage.js +116 -116
- package/dist/pages/test-env/TestEnvPage.js +51 -51
- package/dist/pages/verify-code/page.js +412 -412
- package/dist/routes/auth/logout.d.ts +31 -31
- package/dist/routes/auth/logout.js +98 -98
- package/dist/routes/auth/session.js +157 -157
- package/dist/routes/auth/viability.js +190 -190
- package/package.json +6 -16
- package/dist/auth/auth-options.d.ts +0 -57
- package/dist/auth/auth-options.js +0 -213
- package/dist/auth/callbacks/index.d.ts +0 -6
- package/dist/auth/callbacks/index.js +0 -12
- package/dist/auth/callbacks/jwt.d.ts +0 -45
- package/dist/auth/callbacks/jwt.js +0 -305
- package/dist/auth/callbacks/session.d.ts +0 -60
- package/dist/auth/callbacks/session.js +0 -170
- package/dist/auth/callbacks/signin.d.ts +0 -23
- package/dist/auth/callbacks/signin.js +0 -44
- package/dist/auth/events/index.d.ts +0 -4
- package/dist/auth/events/index.js +0 -8
- package/dist/auth/events/signout.d.ts +0 -17
- package/dist/auth/events/signout.js +0 -32
- package/dist/auth/providers/credentials.d.ts +0 -32
- package/dist/auth/providers/credentials.js +0 -223
- package/dist/auth/providers/index.d.ts +0 -5
- package/dist/auth/providers/index.js +0 -21
- package/dist/auth/providers/oauth.d.ts +0 -26
- package/dist/auth/providers/oauth.js +0 -105
- package/dist/lib/nextauth-secret.d.ts +0 -10
- package/dist/lib/nextauth-secret.js +0 -100
- package/dist/pages/profile/profile-patch.d.ts +0 -1
- package/dist/pages/profile/profile-patch.js +0 -281
- package/dist/pages/security/security-patch.d.ts +0 -1
- package/dist/pages/security/security-patch.js +0 -302
|
@@ -1,19 +1,19 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Admin Audit Logs API Handler
|
|
3
|
-
*
|
|
4
|
-
* Provides admin-level access to audit logs using service account credentials.
|
|
5
|
-
*
|
|
6
|
-
* @version 1.0
|
|
7
|
-
* @requires Admin role (vibe_app_admin or payez_admin)
|
|
8
|
-
*/
|
|
9
|
-
import { NextRequest, NextResponse } from 'next/server';
|
|
10
|
-
export interface AdminAuditHandlerConfig {
|
|
11
|
-
}
|
|
12
|
-
/**
|
|
13
|
-
* GET /api/admin/audit - List audit logs
|
|
14
|
-
* POST /api/admin/audit - Stats
|
|
15
|
-
*/
|
|
16
|
-
export declare function createAuditHandler(config: AdminAuditHandlerConfig): {
|
|
17
|
-
GET(request: NextRequest): Promise<NextResponse<unknown>>;
|
|
18
|
-
POST(request: NextRequest): Promise<NextResponse<unknown>>;
|
|
19
|
-
};
|
|
1
|
+
/**
|
|
2
|
+
* Admin Audit Logs API Handler
|
|
3
|
+
*
|
|
4
|
+
* Provides admin-level access to audit logs using service account credentials.
|
|
5
|
+
*
|
|
6
|
+
* @version 1.0
|
|
7
|
+
* @requires Admin role (vibe_app_admin or payez_admin)
|
|
8
|
+
*/
|
|
9
|
+
import { NextRequest, NextResponse } from 'next/server';
|
|
10
|
+
export interface AdminAuditHandlerConfig {
|
|
11
|
+
}
|
|
12
|
+
/**
|
|
13
|
+
* GET /api/admin/audit - List audit logs
|
|
14
|
+
* POST /api/admin/audit - Stats
|
|
15
|
+
*/
|
|
16
|
+
export declare function createAuditHandler(config: AdminAuditHandlerConfig): {
|
|
17
|
+
GET(request: NextRequest): Promise<NextResponse<unknown>>;
|
|
18
|
+
POST(request: NextRequest): Promise<NextResponse<unknown>>;
|
|
19
|
+
};
|
|
@@ -1,213 +1,213 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
/**
|
|
3
|
-
* Admin Audit Logs API Handler
|
|
4
|
-
*
|
|
5
|
-
* Provides admin-level access to audit logs using service account credentials.
|
|
6
|
-
*
|
|
7
|
-
* @version 1.0
|
|
8
|
-
* @requires Admin role (vibe_app_admin or payez_admin)
|
|
9
|
-
*/
|
|
10
|
-
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
11
|
-
if (k2 === undefined) k2 = k;
|
|
12
|
-
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
13
|
-
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
14
|
-
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
15
|
-
}
|
|
16
|
-
Object.defineProperty(o, k2, desc);
|
|
17
|
-
}) : (function(o, m, k, k2) {
|
|
18
|
-
if (k2 === undefined) k2 = k;
|
|
19
|
-
o[k2] = m[k];
|
|
20
|
-
}));
|
|
21
|
-
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
22
|
-
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
23
|
-
}) : function(o, v) {
|
|
24
|
-
o["default"] = v;
|
|
25
|
-
});
|
|
26
|
-
var __importStar = (this && this.__importStar) || (function () {
|
|
27
|
-
var ownKeys = function(o) {
|
|
28
|
-
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
29
|
-
var ar = [];
|
|
30
|
-
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
31
|
-
return ar;
|
|
32
|
-
};
|
|
33
|
-
return ownKeys(o);
|
|
34
|
-
};
|
|
35
|
-
return function (mod) {
|
|
36
|
-
if (mod && mod.__esModule) return mod;
|
|
37
|
-
var result = {};
|
|
38
|
-
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
39
|
-
__setModuleDefault(result, mod);
|
|
40
|
-
return result;
|
|
41
|
-
};
|
|
42
|
-
})();
|
|
43
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
44
|
-
exports.createAuditHandler = createAuditHandler;
|
|
45
|
-
const server_1 = require("next/server");
|
|
46
|
-
const auth_1 = require("../../server/auth");
|
|
47
|
-
const startup_init_1 = require("../../lib/startup-init");
|
|
48
|
-
const roles_1 = require("../../lib/roles");
|
|
49
|
-
async function checkAdminRole(request) {
|
|
50
|
-
const session = await (0, auth_1.getSession)(request);
|
|
51
|
-
if (!session?.user) {
|
|
52
|
-
return {
|
|
53
|
-
isAdmin: false,
|
|
54
|
-
error: server_1.NextResponse.json({ success: false, error: 'Please sign in' }, { status: 401 }),
|
|
55
|
-
};
|
|
56
|
-
}
|
|
57
|
-
const userRoles = session.user?.roles || [];
|
|
58
|
-
const hasAdminRole = roles_1.ADMIN_ROLES.some(role => userRoles.includes(role));
|
|
59
|
-
if (!hasAdminRole) {
|
|
60
|
-
return {
|
|
61
|
-
isAdmin: false,
|
|
62
|
-
error: server_1.NextResponse.json({ success: false, error: 'Admin access required' }, { status: 403 }),
|
|
63
|
-
};
|
|
64
|
-
}
|
|
65
|
-
return { isAdmin: true };
|
|
66
|
-
}
|
|
67
|
-
async function vibeServiceRequest(endpoint, options) {
|
|
68
|
-
const idpUrl = process.env.NEXT_PUBLIC_IDP_URL || process.env.IDP_URL;
|
|
69
|
-
const clientId = process.env.VIBE_CLIENT_ID;
|
|
70
|
-
const signingKey = process.env.VIBE_HMAC_KEY;
|
|
71
|
-
if (!idpUrl || !clientId || !signingKey) {
|
|
72
|
-
return { ok: false, status: 500, data: null, error: 'Vibe not configured' };
|
|
73
|
-
}
|
|
74
|
-
const timestamp = Math.floor(Date.now() / 1000);
|
|
75
|
-
const stringToSign = `${timestamp}|${options.method}|${endpoint}`;
|
|
76
|
-
const crypto = await Promise.resolve().then(() => __importStar(require('crypto')));
|
|
77
|
-
const signature = crypto
|
|
78
|
-
.createHmac('sha256', Buffer.from(signingKey, 'base64'))
|
|
79
|
-
.update(stringToSign)
|
|
80
|
-
.digest('base64');
|
|
81
|
-
const proxyUrl = `${idpUrl}/api/vibe/proxy`;
|
|
82
|
-
// Get the client slug from startup config for multi-client admin support
|
|
83
|
-
const idpConfig = (0, startup_init_1.getStartupIDPConfig)();
|
|
84
|
-
const idpClientId = idpConfig?.clientSlug || idpConfig?.clientId;
|
|
85
|
-
try {
|
|
86
|
-
const res = await fetch(proxyUrl, {
|
|
87
|
-
method: 'POST',
|
|
88
|
-
headers: {
|
|
89
|
-
'Content-Type': 'application/json',
|
|
90
|
-
'X-Vibe-Client-Id': clientId,
|
|
91
|
-
'X-Vibe-Timestamp': String(timestamp),
|
|
92
|
-
'X-Vibe-Signature': signature,
|
|
93
|
-
...(idpClientId && { 'X-Client-Id': idpClientId }),
|
|
94
|
-
},
|
|
95
|
-
body: JSON.stringify({
|
|
96
|
-
endpoint,
|
|
97
|
-
method: options.method,
|
|
98
|
-
data: options.body ?? null,
|
|
99
|
-
}),
|
|
100
|
-
cache: 'no-store',
|
|
101
|
-
});
|
|
102
|
-
if (res.status === 204)
|
|
103
|
-
return { ok: true, status: 204, data: null };
|
|
104
|
-
if (!res.ok) {
|
|
105
|
-
const errorText = await res.text();
|
|
106
|
-
return { ok: false, status: res.status, data: null, error: errorText };
|
|
107
|
-
}
|
|
108
|
-
const body = await res.json();
|
|
109
|
-
return { ok: true, status: res.status, data: body };
|
|
110
|
-
}
|
|
111
|
-
catch (error) {
|
|
112
|
-
return { ok: false, status: 0, data: null, error: String(error) };
|
|
113
|
-
}
|
|
114
|
-
}
|
|
115
|
-
/**
|
|
116
|
-
* GET /api/admin/audit - List audit logs
|
|
117
|
-
* POST /api/admin/audit - Stats
|
|
118
|
-
*/
|
|
119
|
-
function createAuditHandler(config) {
|
|
120
|
-
return {
|
|
121
|
-
async GET(request) {
|
|
122
|
-
const adminCheck = await checkAdminRole(request);
|
|
123
|
-
if (adminCheck.error)
|
|
124
|
-
return adminCheck.error;
|
|
125
|
-
const { searchParams } = new URL(request.url);
|
|
126
|
-
const action = searchParams.get('action');
|
|
127
|
-
const userId = searchParams.get('userId');
|
|
128
|
-
const startDate = searchParams.get('startDate');
|
|
129
|
-
const endDate = searchParams.get('endDate');
|
|
130
|
-
const page = parseInt(searchParams.get('page') || '1');
|
|
131
|
-
const pageSize = parseInt(searchParams.get('pageSize') || '50');
|
|
132
|
-
const queryBody = {
|
|
133
|
-
page,
|
|
134
|
-
pageSize,
|
|
135
|
-
orderBy: 'created_at',
|
|
136
|
-
orderDirection: 'desc',
|
|
137
|
-
};
|
|
138
|
-
const conditions = [];
|
|
139
|
-
if (action) {
|
|
140
|
-
conditions.push({ field: 'action', operator: 'eq', value: action });
|
|
141
|
-
}
|
|
142
|
-
if (userId) {
|
|
143
|
-
conditions.push({ field: 'user_id', operator: 'eq', value: userId });
|
|
144
|
-
}
|
|
145
|
-
if (startDate) {
|
|
146
|
-
conditions.push({ field: 'created_at', operator: 'gte', value: startDate });
|
|
147
|
-
}
|
|
148
|
-
if (endDate) {
|
|
149
|
-
conditions.push({ field: 'created_at', operator: 'lte', value: endDate });
|
|
150
|
-
}
|
|
151
|
-
if (conditions.length === 1) {
|
|
152
|
-
queryBody.filter = conditions[0];
|
|
153
|
-
}
|
|
154
|
-
else if (conditions.length > 1) {
|
|
155
|
-
queryBody.filter = { operator: 'and', conditions };
|
|
156
|
-
}
|
|
157
|
-
const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: queryBody });
|
|
158
|
-
if (!result.ok) {
|
|
159
|
-
return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
|
|
160
|
-
}
|
|
161
|
-
const rawLogs = result.data?.data || result.data?.documents || [];
|
|
162
|
-
const logs = rawLogs.map((log) => ({
|
|
163
|
-
id: log.id || log.document_id,
|
|
164
|
-
user_id: log.user_id || log.idp_user_id,
|
|
165
|
-
email: log.email,
|
|
166
|
-
action: log.action,
|
|
167
|
-
resource_type: log.resource_type,
|
|
168
|
-
resource_id: log.resource_id,
|
|
169
|
-
details: log.details,
|
|
170
|
-
ip_address: log.ip_address,
|
|
171
|
-
user_agent: log.user_agent,
|
|
172
|
-
created_at: log.created_at,
|
|
173
|
-
}));
|
|
174
|
-
return server_1.NextResponse.json({
|
|
175
|
-
logs,
|
|
176
|
-
meta: result.data?.meta || { total: logs.length, page, pageSize },
|
|
177
|
-
});
|
|
178
|
-
},
|
|
179
|
-
async POST(request) {
|
|
180
|
-
const adminCheck = await checkAdminRole(request);
|
|
181
|
-
if (adminCheck.error)
|
|
182
|
-
return adminCheck.error;
|
|
183
|
-
const body = await request.json();
|
|
184
|
-
const { action } = body;
|
|
185
|
-
if (action === 'stats') {
|
|
186
|
-
const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: { page: 1, pageSize: 10000 } });
|
|
187
|
-
if (!result.ok) {
|
|
188
|
-
return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
|
|
189
|
-
}
|
|
190
|
-
const logs = result.data?.data || result.data?.documents || [];
|
|
191
|
-
const now = new Date();
|
|
192
|
-
const oneDayAgo = new Date(now.getTime() - 24 * 60 * 60 * 1000);
|
|
193
|
-
const oneWeekAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
|
|
194
|
-
const stats = {
|
|
195
|
-
total: logs.length,
|
|
196
|
-
today: logs.filter((l) => new Date(l.created_at) > oneDayAgo).length,
|
|
197
|
-
thisWeek: logs.filter((l) => new Date(l.created_at) > oneWeekAgo).length,
|
|
198
|
-
uniqueUsers: new Set(logs.map((l) => l.user_id || l.idp_user_id)).size,
|
|
199
|
-
byAction: {},
|
|
200
|
-
byResourceType: {},
|
|
201
|
-
};
|
|
202
|
-
logs.forEach((l) => {
|
|
203
|
-
const act = l.action || 'unknown';
|
|
204
|
-
stats.byAction[act] = (stats.byAction[act] || 0) + 1;
|
|
205
|
-
const rt = l.resource_type || 'unknown';
|
|
206
|
-
stats.byResourceType[rt] = (stats.byResourceType[rt] || 0) + 1;
|
|
207
|
-
});
|
|
208
|
-
return server_1.NextResponse.json({ stats });
|
|
209
|
-
}
|
|
210
|
-
return server_1.NextResponse.json({ error: 'Invalid action' }, { status: 400 });
|
|
211
|
-
},
|
|
212
|
-
};
|
|
213
|
-
}
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* Admin Audit Logs API Handler
|
|
4
|
+
*
|
|
5
|
+
* Provides admin-level access to audit logs using service account credentials.
|
|
6
|
+
*
|
|
7
|
+
* @version 1.0
|
|
8
|
+
* @requires Admin role (vibe_app_admin or payez_admin)
|
|
9
|
+
*/
|
|
10
|
+
var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
|
|
11
|
+
if (k2 === undefined) k2 = k;
|
|
12
|
+
var desc = Object.getOwnPropertyDescriptor(m, k);
|
|
13
|
+
if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
|
|
14
|
+
desc = { enumerable: true, get: function() { return m[k]; } };
|
|
15
|
+
}
|
|
16
|
+
Object.defineProperty(o, k2, desc);
|
|
17
|
+
}) : (function(o, m, k, k2) {
|
|
18
|
+
if (k2 === undefined) k2 = k;
|
|
19
|
+
o[k2] = m[k];
|
|
20
|
+
}));
|
|
21
|
+
var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
|
|
22
|
+
Object.defineProperty(o, "default", { enumerable: true, value: v });
|
|
23
|
+
}) : function(o, v) {
|
|
24
|
+
o["default"] = v;
|
|
25
|
+
});
|
|
26
|
+
var __importStar = (this && this.__importStar) || (function () {
|
|
27
|
+
var ownKeys = function(o) {
|
|
28
|
+
ownKeys = Object.getOwnPropertyNames || function (o) {
|
|
29
|
+
var ar = [];
|
|
30
|
+
for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
|
|
31
|
+
return ar;
|
|
32
|
+
};
|
|
33
|
+
return ownKeys(o);
|
|
34
|
+
};
|
|
35
|
+
return function (mod) {
|
|
36
|
+
if (mod && mod.__esModule) return mod;
|
|
37
|
+
var result = {};
|
|
38
|
+
if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
|
|
39
|
+
__setModuleDefault(result, mod);
|
|
40
|
+
return result;
|
|
41
|
+
};
|
|
42
|
+
})();
|
|
43
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
44
|
+
exports.createAuditHandler = createAuditHandler;
|
|
45
|
+
const server_1 = require("next/server");
|
|
46
|
+
const auth_1 = require("../../server/auth");
|
|
47
|
+
const startup_init_1 = require("../../lib/startup-init");
|
|
48
|
+
const roles_1 = require("../../lib/roles");
|
|
49
|
+
async function checkAdminRole(request) {
|
|
50
|
+
const session = await (0, auth_1.getSession)(request);
|
|
51
|
+
if (!session?.user) {
|
|
52
|
+
return {
|
|
53
|
+
isAdmin: false,
|
|
54
|
+
error: server_1.NextResponse.json({ success: false, error: 'Please sign in' }, { status: 401 }),
|
|
55
|
+
};
|
|
56
|
+
}
|
|
57
|
+
const userRoles = session.user?.roles || [];
|
|
58
|
+
const hasAdminRole = roles_1.ADMIN_ROLES.some(role => userRoles.includes(role));
|
|
59
|
+
if (!hasAdminRole) {
|
|
60
|
+
return {
|
|
61
|
+
isAdmin: false,
|
|
62
|
+
error: server_1.NextResponse.json({ success: false, error: 'Admin access required' }, { status: 403 }),
|
|
63
|
+
};
|
|
64
|
+
}
|
|
65
|
+
return { isAdmin: true };
|
|
66
|
+
}
|
|
67
|
+
async function vibeServiceRequest(endpoint, options) {
|
|
68
|
+
const idpUrl = process.env.NEXT_PUBLIC_IDP_URL || process.env.IDP_URL;
|
|
69
|
+
const clientId = process.env.VIBE_CLIENT_ID;
|
|
70
|
+
const signingKey = process.env.VIBE_HMAC_KEY;
|
|
71
|
+
if (!idpUrl || !clientId || !signingKey) {
|
|
72
|
+
return { ok: false, status: 500, data: null, error: 'Vibe not configured' };
|
|
73
|
+
}
|
|
74
|
+
const timestamp = Math.floor(Date.now() / 1000);
|
|
75
|
+
const stringToSign = `${timestamp}|${options.method}|${endpoint}`;
|
|
76
|
+
const crypto = await Promise.resolve().then(() => __importStar(require('crypto')));
|
|
77
|
+
const signature = crypto
|
|
78
|
+
.createHmac('sha256', Buffer.from(signingKey, 'base64'))
|
|
79
|
+
.update(stringToSign)
|
|
80
|
+
.digest('base64');
|
|
81
|
+
const proxyUrl = `${idpUrl}/api/vibe/proxy`;
|
|
82
|
+
// Get the client slug from startup config for multi-client admin support
|
|
83
|
+
const idpConfig = (0, startup_init_1.getStartupIDPConfig)();
|
|
84
|
+
const idpClientId = idpConfig?.clientSlug || idpConfig?.clientId;
|
|
85
|
+
try {
|
|
86
|
+
const res = await fetch(proxyUrl, {
|
|
87
|
+
method: 'POST',
|
|
88
|
+
headers: {
|
|
89
|
+
'Content-Type': 'application/json',
|
|
90
|
+
'X-Vibe-Client-Id': clientId,
|
|
91
|
+
'X-Vibe-Timestamp': String(timestamp),
|
|
92
|
+
'X-Vibe-Signature': signature,
|
|
93
|
+
...(idpClientId && { 'X-Client-Id': idpClientId }),
|
|
94
|
+
},
|
|
95
|
+
body: JSON.stringify({
|
|
96
|
+
endpoint,
|
|
97
|
+
method: options.method,
|
|
98
|
+
data: options.body ?? null,
|
|
99
|
+
}),
|
|
100
|
+
cache: 'no-store',
|
|
101
|
+
});
|
|
102
|
+
if (res.status === 204)
|
|
103
|
+
return { ok: true, status: 204, data: null };
|
|
104
|
+
if (!res.ok) {
|
|
105
|
+
const errorText = await res.text();
|
|
106
|
+
return { ok: false, status: res.status, data: null, error: errorText };
|
|
107
|
+
}
|
|
108
|
+
const body = await res.json();
|
|
109
|
+
return { ok: true, status: res.status, data: body };
|
|
110
|
+
}
|
|
111
|
+
catch (error) {
|
|
112
|
+
return { ok: false, status: 0, data: null, error: String(error) };
|
|
113
|
+
}
|
|
114
|
+
}
|
|
115
|
+
/**
|
|
116
|
+
* GET /api/admin/audit - List audit logs
|
|
117
|
+
* POST /api/admin/audit - Stats
|
|
118
|
+
*/
|
|
119
|
+
function createAuditHandler(config) {
|
|
120
|
+
return {
|
|
121
|
+
async GET(request) {
|
|
122
|
+
const adminCheck = await checkAdminRole(request);
|
|
123
|
+
if (adminCheck.error)
|
|
124
|
+
return adminCheck.error;
|
|
125
|
+
const { searchParams } = new URL(request.url);
|
|
126
|
+
const action = searchParams.get('action');
|
|
127
|
+
const userId = searchParams.get('userId');
|
|
128
|
+
const startDate = searchParams.get('startDate');
|
|
129
|
+
const endDate = searchParams.get('endDate');
|
|
130
|
+
const page = parseInt(searchParams.get('page') || '1');
|
|
131
|
+
const pageSize = parseInt(searchParams.get('pageSize') || '50');
|
|
132
|
+
const queryBody = {
|
|
133
|
+
page,
|
|
134
|
+
pageSize,
|
|
135
|
+
orderBy: 'created_at',
|
|
136
|
+
orderDirection: 'desc',
|
|
137
|
+
};
|
|
138
|
+
const conditions = [];
|
|
139
|
+
if (action) {
|
|
140
|
+
conditions.push({ field: 'action', operator: 'eq', value: action });
|
|
141
|
+
}
|
|
142
|
+
if (userId) {
|
|
143
|
+
conditions.push({ field: 'user_id', operator: 'eq', value: userId });
|
|
144
|
+
}
|
|
145
|
+
if (startDate) {
|
|
146
|
+
conditions.push({ field: 'created_at', operator: 'gte', value: startDate });
|
|
147
|
+
}
|
|
148
|
+
if (endDate) {
|
|
149
|
+
conditions.push({ field: 'created_at', operator: 'lte', value: endDate });
|
|
150
|
+
}
|
|
151
|
+
if (conditions.length === 1) {
|
|
152
|
+
queryBody.filter = conditions[0];
|
|
153
|
+
}
|
|
154
|
+
else if (conditions.length > 1) {
|
|
155
|
+
queryBody.filter = { operator: 'and', conditions };
|
|
156
|
+
}
|
|
157
|
+
const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: queryBody });
|
|
158
|
+
if (!result.ok) {
|
|
159
|
+
return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
|
|
160
|
+
}
|
|
161
|
+
const rawLogs = result.data?.data || result.data?.documents || [];
|
|
162
|
+
const logs = rawLogs.map((log) => ({
|
|
163
|
+
id: log.id || log.document_id,
|
|
164
|
+
user_id: log.user_id || log.idp_user_id,
|
|
165
|
+
email: log.email,
|
|
166
|
+
action: log.action,
|
|
167
|
+
resource_type: log.resource_type,
|
|
168
|
+
resource_id: log.resource_id,
|
|
169
|
+
details: log.details,
|
|
170
|
+
ip_address: log.ip_address,
|
|
171
|
+
user_agent: log.user_agent,
|
|
172
|
+
created_at: log.created_at,
|
|
173
|
+
}));
|
|
174
|
+
return server_1.NextResponse.json({
|
|
175
|
+
logs,
|
|
176
|
+
meta: result.data?.meta || { total: logs.length, page, pageSize },
|
|
177
|
+
});
|
|
178
|
+
},
|
|
179
|
+
async POST(request) {
|
|
180
|
+
const adminCheck = await checkAdminRole(request);
|
|
181
|
+
if (adminCheck.error)
|
|
182
|
+
return adminCheck.error;
|
|
183
|
+
const body = await request.json();
|
|
184
|
+
const { action } = body;
|
|
185
|
+
if (action === 'stats') {
|
|
186
|
+
const result = await vibeServiceRequest('/v1/collections/vibe_app/tables/audit_logs/query', { method: 'POST', body: { page: 1, pageSize: 10000 } });
|
|
187
|
+
if (!result.ok) {
|
|
188
|
+
return server_1.NextResponse.json({ error: result.error }, { status: result.status || 500 });
|
|
189
|
+
}
|
|
190
|
+
const logs = result.data?.data || result.data?.documents || [];
|
|
191
|
+
const now = new Date();
|
|
192
|
+
const oneDayAgo = new Date(now.getTime() - 24 * 60 * 60 * 1000);
|
|
193
|
+
const oneWeekAgo = new Date(now.getTime() - 7 * 24 * 60 * 60 * 1000);
|
|
194
|
+
const stats = {
|
|
195
|
+
total: logs.length,
|
|
196
|
+
today: logs.filter((l) => new Date(l.created_at) > oneDayAgo).length,
|
|
197
|
+
thisWeek: logs.filter((l) => new Date(l.created_at) > oneWeekAgo).length,
|
|
198
|
+
uniqueUsers: new Set(logs.map((l) => l.user_id || l.idp_user_id)).size,
|
|
199
|
+
byAction: {},
|
|
200
|
+
byResourceType: {},
|
|
201
|
+
};
|
|
202
|
+
logs.forEach((l) => {
|
|
203
|
+
const act = l.action || 'unknown';
|
|
204
|
+
stats.byAction[act] = (stats.byAction[act] || 0) + 1;
|
|
205
|
+
const rt = l.resource_type || 'unknown';
|
|
206
|
+
stats.byResourceType[rt] = (stats.byResourceType[rt] || 0) + 1;
|
|
207
|
+
});
|
|
208
|
+
return server_1.NextResponse.json({ stats });
|
|
209
|
+
}
|
|
210
|
+
return server_1.NextResponse.json({ error: 'Invalid action' }, { status: 400 });
|
|
211
|
+
},
|
|
212
|
+
};
|
|
213
|
+
}
|
|
@@ -1,21 +1,21 @@
|
|
|
1
|
-
/**
|
|
2
|
-
* Admin API Handlers
|
|
3
|
-
*
|
|
4
|
-
* Provides admin-level API handlers for Vibe data access.
|
|
5
|
-
* These handlers use service account credentials to bypass user filtering.
|
|
6
|
-
*
|
|
7
|
-
* Usage:
|
|
8
|
-
* ------
|
|
9
|
-
* // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
|
|
10
|
-
* import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
|
|
11
|
-
*
|
|
12
|
-
* export const GET = createGetTableDataHandler({ ... });
|
|
13
|
-
*/
|
|
14
|
-
export { createGetCollectionsHandler, createGetTablesHandler, createGetTableDataHandler, createGetRecordHandler, createUpdateRecordHandler, createDeleteRecordHandler, createQueryHandler, type AdminVibeHandlerConfig, } from './vibe-data';
|
|
15
|
-
export { createSessionsHandler, type AdminSessionsHandlerConfig, } from './sessions';
|
|
16
|
-
export { createUsersHandler, type AdminUsersHandlerConfig, } from './users';
|
|
17
|
-
export { createAuditHandler, type AdminAuditHandlerConfig, } from './audit';
|
|
18
|
-
export { createAnalyticsHandler, type AdminAnalyticsHandlerConfig, } from './analytics';
|
|
19
|
-
export { createSiteLogsHandler, createSiteLogsStatsHandler, createSiteLogsDrainHandler, createSiteLogsQueueHandler, type SiteLogsHandlerConfig, } from './site-logs';
|
|
20
|
-
export { createRedisSessionsHandler, createRedisSessionRevokeHandler, type RedisSessionsHandlerConfig, } from './redis-sessions';
|
|
21
|
-
export { createStatsHandler, type AdminStatsHandlerConfig, } from './stats';
|
|
1
|
+
/**
|
|
2
|
+
* Admin API Handlers
|
|
3
|
+
*
|
|
4
|
+
* Provides admin-level API handlers for Vibe data access.
|
|
5
|
+
* These handlers use service account credentials to bypass user filtering.
|
|
6
|
+
*
|
|
7
|
+
* Usage:
|
|
8
|
+
* ------
|
|
9
|
+
* // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
|
|
10
|
+
* import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
|
|
11
|
+
*
|
|
12
|
+
* export const GET = createGetTableDataHandler({ ... });
|
|
13
|
+
*/
|
|
14
|
+
export { createGetCollectionsHandler, createGetTablesHandler, createGetTableDataHandler, createGetRecordHandler, createUpdateRecordHandler, createDeleteRecordHandler, createQueryHandler, type AdminVibeHandlerConfig, } from './vibe-data';
|
|
15
|
+
export { createSessionsHandler, type AdminSessionsHandlerConfig, } from './sessions';
|
|
16
|
+
export { createUsersHandler, type AdminUsersHandlerConfig, } from './users';
|
|
17
|
+
export { createAuditHandler, type AdminAuditHandlerConfig, } from './audit';
|
|
18
|
+
export { createAnalyticsHandler, type AdminAnalyticsHandlerConfig, } from './analytics';
|
|
19
|
+
export { createSiteLogsHandler, createSiteLogsStatsHandler, createSiteLogsDrainHandler, createSiteLogsQueueHandler, type SiteLogsHandlerConfig, } from './site-logs';
|
|
20
|
+
export { createRedisSessionsHandler, createRedisSessionRevokeHandler, type RedisSessionsHandlerConfig, } from './redis-sessions';
|
|
21
|
+
export { createStatsHandler, type AdminStatsHandlerConfig, } from './stats';
|
|
@@ -1,42 +1,42 @@
|
|
|
1
|
-
"use strict";
|
|
2
|
-
/**
|
|
3
|
-
* Admin API Handlers
|
|
4
|
-
*
|
|
5
|
-
* Provides admin-level API handlers for Vibe data access.
|
|
6
|
-
* These handlers use service account credentials to bypass user filtering.
|
|
7
|
-
*
|
|
8
|
-
* Usage:
|
|
9
|
-
* ------
|
|
10
|
-
* // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
|
|
11
|
-
* import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
|
|
12
|
-
*
|
|
13
|
-
* export const GET = createGetTableDataHandler({ ... });
|
|
14
|
-
*/
|
|
15
|
-
Object.defineProperty(exports, "__esModule", { value: true });
|
|
16
|
-
exports.createStatsHandler = exports.createRedisSessionRevokeHandler = exports.createRedisSessionsHandler = exports.createSiteLogsQueueHandler = exports.createSiteLogsDrainHandler = exports.createSiteLogsStatsHandler = exports.createSiteLogsHandler = exports.createAnalyticsHandler = exports.createAuditHandler = exports.createUsersHandler = exports.createSessionsHandler = exports.createQueryHandler = exports.createDeleteRecordHandler = exports.createUpdateRecordHandler = exports.createGetRecordHandler = exports.createGetTableDataHandler = exports.createGetTablesHandler = exports.createGetCollectionsHandler = void 0;
|
|
17
|
-
var vibe_data_1 = require("./vibe-data");
|
|
18
|
-
Object.defineProperty(exports, "createGetCollectionsHandler", { enumerable: true, get: function () { return vibe_data_1.createGetCollectionsHandler; } });
|
|
19
|
-
Object.defineProperty(exports, "createGetTablesHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTablesHandler; } });
|
|
20
|
-
Object.defineProperty(exports, "createGetTableDataHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTableDataHandler; } });
|
|
21
|
-
Object.defineProperty(exports, "createGetRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createGetRecordHandler; } });
|
|
22
|
-
Object.defineProperty(exports, "createUpdateRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createUpdateRecordHandler; } });
|
|
23
|
-
Object.defineProperty(exports, "createDeleteRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createDeleteRecordHandler; } });
|
|
24
|
-
Object.defineProperty(exports, "createQueryHandler", { enumerable: true, get: function () { return vibe_data_1.createQueryHandler; } });
|
|
25
|
-
var sessions_1 = require("./sessions");
|
|
26
|
-
Object.defineProperty(exports, "createSessionsHandler", { enumerable: true, get: function () { return sessions_1.createSessionsHandler; } });
|
|
27
|
-
var users_1 = require("./users");
|
|
28
|
-
Object.defineProperty(exports, "createUsersHandler", { enumerable: true, get: function () { return users_1.createUsersHandler; } });
|
|
29
|
-
var audit_1 = require("./audit");
|
|
30
|
-
Object.defineProperty(exports, "createAuditHandler", { enumerable: true, get: function () { return audit_1.createAuditHandler; } });
|
|
31
|
-
var analytics_1 = require("./analytics");
|
|
32
|
-
Object.defineProperty(exports, "createAnalyticsHandler", { enumerable: true, get: function () { return analytics_1.createAnalyticsHandler; } });
|
|
33
|
-
var site_logs_1 = require("./site-logs");
|
|
34
|
-
Object.defineProperty(exports, "createSiteLogsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsHandler; } });
|
|
35
|
-
Object.defineProperty(exports, "createSiteLogsStatsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsStatsHandler; } });
|
|
36
|
-
Object.defineProperty(exports, "createSiteLogsDrainHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsDrainHandler; } });
|
|
37
|
-
Object.defineProperty(exports, "createSiteLogsQueueHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsQueueHandler; } });
|
|
38
|
-
var redis_sessions_1 = require("./redis-sessions");
|
|
39
|
-
Object.defineProperty(exports, "createRedisSessionsHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionsHandler; } });
|
|
40
|
-
Object.defineProperty(exports, "createRedisSessionRevokeHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionRevokeHandler; } });
|
|
41
|
-
var stats_1 = require("./stats");
|
|
42
|
-
Object.defineProperty(exports, "createStatsHandler", { enumerable: true, get: function () { return stats_1.createStatsHandler; } });
|
|
1
|
+
"use strict";
|
|
2
|
+
/**
|
|
3
|
+
* Admin API Handlers
|
|
4
|
+
*
|
|
5
|
+
* Provides admin-level API handlers for Vibe data access.
|
|
6
|
+
* These handlers use service account credentials to bypass user filtering.
|
|
7
|
+
*
|
|
8
|
+
* Usage:
|
|
9
|
+
* ------
|
|
10
|
+
* // In your app's API route (e.g., app/api/admin/vibe/data/[collection]/[table]/route.ts)
|
|
11
|
+
* import { createGetTableDataHandler } from '@payez/next-mvp/api-handlers/admin';
|
|
12
|
+
*
|
|
13
|
+
* export const GET = createGetTableDataHandler({ ... });
|
|
14
|
+
*/
|
|
15
|
+
Object.defineProperty(exports, "__esModule", { value: true });
|
|
16
|
+
exports.createStatsHandler = exports.createRedisSessionRevokeHandler = exports.createRedisSessionsHandler = exports.createSiteLogsQueueHandler = exports.createSiteLogsDrainHandler = exports.createSiteLogsStatsHandler = exports.createSiteLogsHandler = exports.createAnalyticsHandler = exports.createAuditHandler = exports.createUsersHandler = exports.createSessionsHandler = exports.createQueryHandler = exports.createDeleteRecordHandler = exports.createUpdateRecordHandler = exports.createGetRecordHandler = exports.createGetTableDataHandler = exports.createGetTablesHandler = exports.createGetCollectionsHandler = void 0;
|
|
17
|
+
var vibe_data_1 = require("./vibe-data");
|
|
18
|
+
Object.defineProperty(exports, "createGetCollectionsHandler", { enumerable: true, get: function () { return vibe_data_1.createGetCollectionsHandler; } });
|
|
19
|
+
Object.defineProperty(exports, "createGetTablesHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTablesHandler; } });
|
|
20
|
+
Object.defineProperty(exports, "createGetTableDataHandler", { enumerable: true, get: function () { return vibe_data_1.createGetTableDataHandler; } });
|
|
21
|
+
Object.defineProperty(exports, "createGetRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createGetRecordHandler; } });
|
|
22
|
+
Object.defineProperty(exports, "createUpdateRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createUpdateRecordHandler; } });
|
|
23
|
+
Object.defineProperty(exports, "createDeleteRecordHandler", { enumerable: true, get: function () { return vibe_data_1.createDeleteRecordHandler; } });
|
|
24
|
+
Object.defineProperty(exports, "createQueryHandler", { enumerable: true, get: function () { return vibe_data_1.createQueryHandler; } });
|
|
25
|
+
var sessions_1 = require("./sessions");
|
|
26
|
+
Object.defineProperty(exports, "createSessionsHandler", { enumerable: true, get: function () { return sessions_1.createSessionsHandler; } });
|
|
27
|
+
var users_1 = require("./users");
|
|
28
|
+
Object.defineProperty(exports, "createUsersHandler", { enumerable: true, get: function () { return users_1.createUsersHandler; } });
|
|
29
|
+
var audit_1 = require("./audit");
|
|
30
|
+
Object.defineProperty(exports, "createAuditHandler", { enumerable: true, get: function () { return audit_1.createAuditHandler; } });
|
|
31
|
+
var analytics_1 = require("./analytics");
|
|
32
|
+
Object.defineProperty(exports, "createAnalyticsHandler", { enumerable: true, get: function () { return analytics_1.createAnalyticsHandler; } });
|
|
33
|
+
var site_logs_1 = require("./site-logs");
|
|
34
|
+
Object.defineProperty(exports, "createSiteLogsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsHandler; } });
|
|
35
|
+
Object.defineProperty(exports, "createSiteLogsStatsHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsStatsHandler; } });
|
|
36
|
+
Object.defineProperty(exports, "createSiteLogsDrainHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsDrainHandler; } });
|
|
37
|
+
Object.defineProperty(exports, "createSiteLogsQueueHandler", { enumerable: true, get: function () { return site_logs_1.createSiteLogsQueueHandler; } });
|
|
38
|
+
var redis_sessions_1 = require("./redis-sessions");
|
|
39
|
+
Object.defineProperty(exports, "createRedisSessionsHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionsHandler; } });
|
|
40
|
+
Object.defineProperty(exports, "createRedisSessionRevokeHandler", { enumerable: true, get: function () { return redis_sessions_1.createRedisSessionRevokeHandler; } });
|
|
41
|
+
var stats_1 = require("./stats");
|
|
42
|
+
Object.defineProperty(exports, "createStatsHandler", { enumerable: true, get: function () { return stats_1.createStatsHandler; } });
|